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Claim Listins 

1 . (Original) A method comprising: 
receiving at least one packet; and 

disposing of the received at least one packet in response to a walk of a Balanced Hash 
Table of Access Control List Binary Comparison Trees, the Table encoding an 
Access Control List. 

2. (Original) The method of Claim 1 , v^herein said disposing of the received at 
least one packet in response to a walk of a Balanced Hash Table of Access Control List 
Binary Comparison Trees, the Table encoding an Access Control List further includes: 

constructing a hash table index value from one or more bit positions, within the 
received at least one packet, pointed at by one or more pointers of a Hash- 
Table-Balancing Bit Selection Vector; and 

walking a binary comparison tree associated with the constructed hash table index 
value. 

3. (Original) The method of Claim 1, further comprising: 

converting the Access Control List to the Balanced Hash Table of Access Control 
List Binary Comparison Trees, the Table encoding the Access Control List. 

4. (Original) The method of Claim 3, wherein said converting the Access 
Control List to the Balanced Hash Table of Access Control List Binary Comparison Trees, 
the Table encoding the Access Control List further includes: 

creating a binary comparison tree for at least one Access Control List rule in the 
Access Control List. 

5. (Original) The method of Claim 4, wherein said creating a binary comparison 
tree for at least one Access Control List rule further includes: 

creating at least one node, having at least one miss branch and at least one match 

branch, for at least one packet header field utilized by the at least one Access 
Control List Rule in the Access Control List. 
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6. (Original) The method of Claim 3, wherein said converting the Access 

' Control List to the Balanced Hash Table of Access Control List Binary Comparison Trees, 
the Table encoding the Access Control List further includes: 

inserting at least a part of a binary comparison tree constructed for at least one Access 
Control List rule into a hash table entry pointed at by a hash table index. 

7. (Original) The method of Claim 6, wherein said inserting at least a part of a 
binary comparison tree constructed for at least one Access Control List rule into a hash table 
entry pointed at by a hash table index further includes: 

generating a hash table index value for the at least one Access Control List rule; and 
inserting the at least a part of a binary comparison tree constructed for at least one 
Access Control List rule into a hash table entry pointed at by a hash table 
index which is equal to the generated hash table index value. 

8. (Original) The method of Claim 7, wherein said inserting the at least a part of 
a binary comparison tree constructed for at least one Access Control List rule into a hash 
table entry pointed at by a hash table index which is equal to the generated hash table index 
value further includes: 

inserting, in its entirety, the binary comparison tree constructed for the at least one 
Access Control List rule into the hash table entry pointed at by the hash table 
index in response to a determination that no pre-existing binary comparison 
tree is resident within the hash table entry. 

9. (Original) The method of Claim 7, wherein said inserting the at least a part of 
a binary comparison tree constructed for at least one Access Control List rule into a hash 
table entry pointed at by a hash table index which is equal to the generated hash table index 
value further includes: 

inserting at least one node of the binary comparison tree constructed for the at least 
one Access Control List rule into the hash table entry pointed at by the hash 
table index in response to a determination that a pre-existing binary 
comparison tree is resident within the hash table entry. 
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10. (Original) The method of Claim 7, wherein said generating a hash table index 
^ value for the at least one Access Control List rule further includes: 

constructing the hash table index value from the contents of one or more packet 
headers utilized by the at least one Access Control List rule in the Access 
Control List. 

11. (Original) The method of Claim 10, v^herein said constructing the hash table 
index value from the contents of one or more packet headers utilized by the at least one 
Access Control List rule in the Access Control List further includes: 

constructing the hash table index value from the contents of the one or more packet 
header bit positions pointed at by one or more pointers of a Hash-Table- 
Balancing Bit Selection Vector. 

12. (Original) The method of Claim 11, v^herein said constructing the hash table 
index value from the contents of the one or more packet header bit positions pointed at by 
one or more pointers of a Hash-Table-Balancing Bit Selection Vector further includes: 

constructing the Hash-Table-Balancing Bit Selection Vector. 

13. (Original) The method of Claim 12, wherein said constructing the Hash- 
Table-Balancing Bit Selection Vector further includes: 

defining one or more pointers of the Hash-Table-Balancing Bit Selection Vector to 
point to one or more bit positions in one or more packet header fields utilized 
by one or more rules of the Access Control List. 

14. (Original) The method of Claim 13, wherein said defining one or more 
pointers of the Hash-Table-Balancing Bit Selection Vector to point to one or more bit 
positions in one or more packet header fields utilized by one or more rules of the Access 
Control List further includes: 

defining the one or more pointers of the Hash-Table-Balancing Bit Selection Vector 
to point to one or more bit positions, which appear relatively most frequently, 
within the one or more packet header fields utilized by the one or more Rules 
of the Access Control List. 
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15. (Original) The method of Claim 13, wherein said defining one or more 
pointers of the Hash-Table-Balancing Bit Selection Vector to point to one or more bit 
positions in one or more packet header fields utilized by one or more rules of the Access 
Control List further includes: 

defining the one or more pointers of the Hash-Table-Balancing Bit Selection Vector 
to point to one or more bit positions, whose contents have relatively equal 
variation between logical one and logical zero, within the one or more packet 
header fields utiHzed by the one or more Rules of the Access Control List. 

16. (Original) A system comprising: 
means for receiving at least one packet; and 

means for disposing of the received at least one packet in response to a walk of a 
Balanced Hash Table of Access Control List Binary Comparison Trees, the 
Table encoding an Access Control List. 

17. (Original) The system of Claim 16, wherein said means for disposing of the 
received at least one packet in response to a walk of a Balanced Hash Table of Access 
Control List Binary Comparison Trees, the Table encoding an Access Control List further 
includes: 

means for constructing a hash table index value fi:*om one or more bit positions, 

within the received at least one packet, pointed at by one or more pointers of a 
Hash-Table-Balancing Bit Selection Vector; and 

means for walking a binary comparison tree associated with the constructed hash 
table index value. 

18. (Original) The system of Claim 16, further comprising: 

means for converting the Access Control List to the Balanced Hash Table of Access 
Control List Binary Comparison Trees, the Table encoding the Access Control 
List. 

1 9. (Original) The system of Claim 1 8, wherein said means for converting the 
Access Control List to the Balanced Hash Table of Access Control List Binary Comparison 
Trees, the Table encoding the Access Control List further includes: 
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means for creating a binary comparison tree for at least one Access Control List rule 
in the Access Control List. 

20. (Original) The system of Claim 19, wherein said means for creating a binary 
comparison tree for at least one Access Control List rule further includes: 

means for creating at least one node, having at least one miss branch and at least one 

match branch, for at least one packet header field utilized by the at least one 

Access Control List rule in the Access Control List. 

2L (Original) The system of Claim 18, wherein said means for converting the 
Access Control List to the Balanced Hash Table of Access Control List Binary Comparison 
Trees, the Table encoding the Access Control List further includes: 

means for inserting at least a part of a binary comparison tree constructed for at least 
one Access Control List rule into a hash table entry pointed at by a hash table 
index. 

22. (Original) The system of Claim 21, wherein said means for inserting at least a 
part of a binary comparison tree constructed for at least one Access Control List rule into a 
hash table entry pointed at by a hash table index further includes: 

means for generating a hash table index value for the at least one Access Control List 
rule; and 

means for inserting the at least a part of a binary comparison tree constructed for at 
least one Access Control List rule into a hash table entry pointed at by a hash 
table index which is equal to the generated hash table index value. 

23. (Original) The system of Claim 22, wherein said means for inserting the at 
least a part of a binary comparison tree constructed for at least one Access Control List rule 
into a hash table entry pointed at by a hash table index which is equal to the generated hash 
table index value further includes: 

means for inserting, in its entirety, the binary comparison tree constructed for the at 
least one Access Control List Rule into the hash table entry pointed at by the 
hash table index in response to a determination that no pre-existing binary 
comparison tree is resident within the hash table entry. 
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24. (Original) The system of Claim 22, wherein said means for inserting the at 
least a part of a binary comparison tree constructed for at least one Access Control List rule 
into a hash table entry pointed at by a hash table index which is equal to the generated hash 
table index value further includes: 

means for inserting at least one node of the binary comparison tree constructed for the 
at least one Access Control List rule into the hash table entry pointed at by the 
hash table index in response to a determination that a pre-existing binary 
comparison tree is resident within the hash table entry. 

25. (Original) The system of Claim 22, wherein said means for generating a hash 
table index value for the at least one Access Control List rule further includes: 

means for constructing the hash table index value from the contents of one or more 
packet headers utilized by the at least one Access Control List rule in the 
Access Control List. 

26. (Original) The system of Claim 25, wherein said means for constructing the 
hash table index value from the contents of one or more packet headers utilized by the at 
least one Access Control List rule in the Access Control List further includes: 

means for constructing the hash table index value from the contents of the one or 

more packet header bit positions pointed at by one or more pointers of a Hash- 
Table-Balancing Bit Selection Vector. 

27. (Original) The system of Claim 26, wherein said means for constructing the 
hash table index value from the contents of the one or more packet header bit positions 
pointed at by one or more pointers of a Hash-Table-Balancing Bit Selection Vector further 
includes: 

means for constructing the Hash-Table-Balancing Bit Selection Vector. 

28. (Original) The system of Claim 27, wherein said means for constructing the 
Hash-Table-Balancing Bit Selection Vector further includes: 

means for defining one or more pointers of the Hash-Table-Balancing Bit Selection 
Vector to point to one or more bit positions in one or more packet header 
fields utilized by one or more rules of the Access Control List. 
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29. (Original) The system of Claim 28, wherein said means for defining one or 
more pointers of the Hash-Table-Balancing Bit Selection Vector to point to one or more bit 
positions in one or more packet header fields utilized by one or more rules of the Access 
Control List further includes: 

means for defining the one or more pointers of the Hash-Table-Balancing Bit 

Selection Vector to point to one or more bit positions, which appear relatively 
most fi"equently, within the one or more packet header fields utilized by the 
one or more Rules of the Access Control List. 

30. (Original) The system of Claim 29, wherein said means for defining one or 
more pointers of the Hash-Table-Balancing Bit Selection Vector to point to one or more bit 
positions in one or more packet header fields utilized by one or more rules of the Access 
Control List fixrther includes: 

means for defining the one or more pointers of the Hash-Table-Balancing Bit 

Selection Vector to point to one or more bit positions, whose contents have 
relatively equal variation between logical one and logical zero, within the one 
or more packet header fields utilized by the one or more Rules of the Access 
Control List. 

3L (Original) The system of Claim 16, further comprising: 
signal bearing media bearing 

said means for receiving at least one packet, and 

said means for disposing of the received at least one packet in response to a 
walk of a Balanced Hash Table of Access Control List Binary 
Comparison Trees, the Table encoding an Access Control List. 

32. (Original) The system of Claim 3 1 , wherein said signal bearing media further 
includes: 

recordable media. 

33. (Original) The system of Claim 3 1 , wherein said signal bearing media further 
includes: 

transmission media. 
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34. (Original) The system of Claim 16, wherein the system further includes: 
a network station. 

35. (Original) A program product comprising: 
signal bearing media bearing 

means for receiving at least one packet, and 

means for disposing of the received at least one packet in response to a walk 
of a Balanced Hash Table of Access Control List Binary Comparison 
Trees, the Table encoding an Access Control List. 

36. (Original) The program product of Claim 35, wherein said signal bearing 
media further includes: 

recordable media. 

37. (Original) The program product of Claim 35, wherein said signal bearing 
media further includes: 

transmission media. 

38. (Original) The program product of Claim 35, wherein said means for 
disposing of the received at least one packet in response to a walk of a Balanced Hash Table 
of Access Control List Binary Comparison Trees, the Table encoding an Access Control List 
further includes: 

means for constructing a hash table index value from one or more bit positions, 

within the received at least one packet, pointed at by one or more pointers of a 
Hash-Table-Balancing Bit Selection Vector; and 

means for walking a binary comparison tree associated with the constructed hash 
table index value. 

39. (Original) The program product of Claim 35, further comprising: 

means for converting the Access Control List to the Balanced Hash Table of Access 
Control List Binary Comparison Trees, the Table encoding the Access Control 
List. 
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40. (Original) The program product of Claim 39, wherein said means for 
converting the Access Control List to the Balanced Hash Table of Access Control List Binary 
Comparison Trees, the Table encoding the Access Control List further includes: 

means for creating a binary comparison tree for at least one Access Control List rule 
in the Access Control List. 

41 . (Original) The program product of Claim 40, wherein said means for creating 
a binary comparison tree for at least one Access Control List rule further includes: 

means for creating at least one node, having at least one miss branch and at least one 
match branch, for at least one packet header field utilized by the at least one 
Access Control List rule in the Access Control List. 

42. (Original) The program product of Claim 39, wherein said means for 
converting the Access Control List to the Balanced Hash Table of Access Control List Binary 
Comparison Trees, the Table encoding the Access Control List further includes: 

means for inserting at least a part of a binary comparison tree constructed for at least 
one Access Control List rule into a hash table entry pointed at by a hash table 
index. 

43. (Original) The program product of Claim 42, wherein said means for inserting 
at least a part of a binary comparison tree constructed for at least one Access Control List 
rule into a hash table entry pointed at by a hash table index further includes: 

means for generating a hash table index value for the at least one Access Control List 
rule; and 

means for inserting the at least a part of a binary comparison tree constructed for at 
least one Access Control List rule into a hash table entry pointed at by a hash 
table index which is equal to the generated hash table index value. 

44. (Original) The program product of Claim 43, wherein said means for inserting 
the at least a part of a binary comparison tree constructed for at least one Access Control List 
rule into a hash table entry pointed at by a hash table index which is equal to the generated 
hash table index value further includes: 

means for inserting, in its entirety, the binary comparison tree constructed for the at 
least one Access Control List Rule into the hash table entry pointed at by the 
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hash table index in response to a determination that no pre-existing binary 
comparison tree is resident within the hash table entry. 

45. (Original) The program product of Claim 43, wherein said means for inserting 
the at least a part of a binary comparison tree constructed for at least one Access Control List 
rule into a hash table entry pointed at by a hash table index which is equal to the generated 
hash table index value further includes: 

means for inserting at least one node of the binary comparison tree constructed for the 
at least one Access Control List rule into the hash table entry pointed at by the 
hash table index in response to a determination that a pre-existing binary 
comparison tree is resident within the hash table entry. 

46. (Original) The program product of Claim 43, wherein said means for 
generating a hash table index value for the at least one Access Control List rule further 
includes: 

means for constructing the hash table index value from the contents of one or more 
packet headers utilized by the at least one Access Control List rule in the 
Access Control List. 

47. (Original) The program product of Claim 46, wherein said means for 
constructing the hash table index value from the contents of one or more packet headers 
utilized by the at least one Access Control List rule in the Access Control List further 
includes: 

means for constructing the hash table index value from the contents of the one or 

more packet header bit positions pointed at by one or more pointers of a Hash- 
Table-Balancing Bit Selection Vector. 

48. (Original) The program product of Claim 47, wherein said means for 
constructing the hash table index value from the contents of the one or more packet header 
bit positions pointed at by one or more pointers of a Hash-Table-Balancing Bit Selection 
Vector further includes: 

means for constructing the Hash-Table-Balancing Bit Selection Vector. 
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49. (Original) The program product of Claim 48, wherein said means for 
constructing the Hash-Table-Balancing Bit Selection Vector further includes: 

means for defining one or more pointers of the Hash-Table-Balancing Bit Selection 
Vector to point to one or more bit positions in one or more packet header 
fields utilized by one or more rules of the Access Control List. 

50. (Original) The program product of Claim 49, wherein said means for defining 
one or more pointers of the Hash-Table-Balancing Bit Selection Vector to point to one or 
more bit positions in one or more packet header fields utilized by one or more rules of the 
Access Control List fiirther includes: 

means for defining the one or more pointers of the Hash-Table-Balancing Bit 

Selection Vector to point to one or more bit positions, which appear relatively 
most firequently, within the one or more packet header fields utilized by the 
one or more Rules of the Access Control List. 

5 1 . (Original) The program product of Claim 50, wherein said means for defining 
one or more pointers of the Hash-Table-Balancing Bit Selection Vector to point to one or 
more bit positions in one or more packet header fields utilized by one or more rules of the 
Access Control List further includes: 

means for defining the one or more pointers of the Hash-Table-Balancing Bit 

Selection Vector to point to one or more bit positions, whose contents have 
relatively equal variation between logical one and logical zero, within the one 
or more packet header fields utilized by the one or more Rules of the Access 
Control List. 
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